Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/6z18SKrMuFdA9hR0Avainjcopfw.roa
File: 6z18SKrMuFdA9hR0Avainjcopfw.roa (raw, json)
Hash identifier: 0lf8Pkrhr/tpn8KoDYndPhgiBD42jcdwrUMS3A9U28U=
Subject key identifier: EB:3D:7C:48:AA:CC:B8:57:40:F6:14:74:02:F6:A2:9E:37:28:A5:FC
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 018CC94DEFC2B6EAB0585F1B0B4B4945DF6E
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/6z18SKrMuFdA9hR0Avainjcopfw.roa
Signing time: Tue 02 Jan 2024 08:32:57 +0000
ROA not before: Tue 02 Jan 2024 08:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39384
IP address blocks: 176.221.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ef:c2:b6:ea:b0:58:5f:1b:0b:4b:49:45:df:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Jan 2 08:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3d7c48aaccb85740f6147402f6a29e3728a5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:1a:93:3f:05:87:18:a5:6c:b5:52:c1:c9:
38:da:c1:90:46:cf:55:65:f5:99:c7:b9:e3:25:d7:
07:f6:17:33:e5:c4:71:e7:7b:64:ba:7d:43:69:41:
94:8e:bf:fc:ef:01:19:55:2c:aa:e9:0a:eb:cb:1b:
fc:04:dc:9c:52:b3:c2:1d:6c:59:13:8f:87:7d:03:
b6:79:4b:4b:2c:ef:ce:c6:76:37:70:fd:15:37:44:
ae:98:84:68:28:ef:8a:7e:9b:bd:66:9a:32:89:05:
3a:40:3e:12:ad:58:3c:28:0c:27:c8:32:b8:84:ff:
eb:40:41:2f:2d:e3:a5:cf:08:0d:dc:01:53:cf:63:
e4:d2:79:c3:b4:fe:30:ee:f0:3a:ba:91:08:80:ee:
c4:b8:15:96:37:05:df:53:fe:5e:18:b4:95:a2:ce:
bb:96:2d:c0:74:03:31:83:7c:dd:dd:dc:60:e8:9c:
80:c7:14:10:8d:f8:da:bc:97:26:48:19:84:c3:f3:
48:86:7f:a4:ba:ba:8c:fd:e3:58:a6:6f:e3:04:43:
94:0f:f4:bd:30:b6:6a:ed:03:cb:87:b2:1d:68:17:
bc:0b:52:48:cd:bd:e5:08:c9:df:4a:03:f6:20:03:
a2:87:db:41:d0:7d:73:d5:45:96:72:06:31:52:c7:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:7C:48:AA:CC:B8:57:40:F6:14:74:02:F6:A2:9E:37:28:A5:FC
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/6z18SKrMuFdA9hR0Avainjcopfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.39.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b3:51:30:60:68:a1:c9:31:d3:f3:8d:49:dd:89:ce:7e:71:
da:bf:ba:01:65:14:05:05:7f:2f:12:97:2e:15:ba:cd:f4:84:
95:e9:fb:2a:9c:84:f7:d9:a8:45:64:ad:88:01:36:a3:99:0b:
f7:b0:26:1d:57:aa:2a:40:72:b5:82:48:80:36:39:ad:6f:b8:
e8:3c:83:ca:da:14:9f:a2:3a:df:39:5e:b4:b2:8c:8a:f7:ee:
09:c2:1e:71:d1:11:29:d3:8e:7b:f8:5f:36:08:e2:4b:0f:7d:
89:fd:78:cf:f1:4b:06:8f:e7:a6:84:9f:a2:b5:b2:cc:2a:24:
3f:56:5b:95:1d:1f:88:9e:99:32:6d:81:9e:b1:a4:23:c4:09:
d8:78:4c:b1:2b:0f:0b:c7:45:f3:98:37:ef:a2:40:05:1a:0e:
a4:8f:f2:a4:a5:a6:07:73:2b:8e:95:27:69:eb:28:02:86:4b:
11:b7:96:37:0d:2b:70:6c:a2:0a:65:1d:83:87:84:e4:ac:8c:
01:60:a8:c2:a1:a6:60:d3:9f:fb:5f:40:57:bb:a8:2d:a2:94:
6e:fb:45:a1:ba:d5:ab:3b:3e:2c:22:67:49:62:01:32:45:ad:
db:57:b5:f6:64:3a:16:ac:fa:44:1c:a9:51:61:19:0c:a7:5b:
e4:04:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:22 2024 by rpki-client on console-fra.rpki-client.org